Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/9hqtEF5A45NP4S-Nic6WXo3e1io.roa
File: 9hqtEF5A45NP4S-Nic6WXo3e1io.roa (raw, json)
Hash identifier: 8Rdf2AY/rLgIEwkbSjG/e/u+XvPUyJ/yZbCPqpVSi5w=
Subject key identifier: F6:1A:AD:10:5E:40:E3:93:4F:E1:2F:8D:89:CE:96:5E:8D:DE:D6:2A
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018570FBBEDAE43A756B43AFD36400889B25
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/9hqtEF5A45NP4S-Nic6WXo3e1io.roa
Signing time: Mon 02 Jan 2023 05:37:04 +0000
ROA not before: Mon 02 Jan 2023 05:37:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61361
IP address blocks: 94.247.47.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:be:da:e4:3a:75:6b:43:af:d3:64:00:88:9b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 2 05:37:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f61aad105e40e3934fe12f8d89ce965e8dded62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:41:d8:4e:7d:8b:f1:1b:ce:4f:5d:29:a4:
d7:7e:66:6e:3b:19:46:86:f3:0b:5c:b6:da:93:22:
e1:97:ac:4d:fe:3a:5d:b4:bd:5a:97:39:38:25:98:
12:2c:bc:d0:ff:0b:2d:b5:5d:8a:a6:c2:03:ff:d5:
0d:f5:d6:ef:59:7f:95:2b:bb:59:20:43:46:86:ce:
ab:4b:bf:e7:01:64:c4:e3:0c:f2:77:d2:02:13:f9:
c1:90:90:89:df:54:3c:b6:77:9b:8e:d0:e3:6f:fa:
13:6c:5c:bd:d0:10:9e:15:af:db:99:71:66:01:3d:
13:c9:90:04:93:6c:50:60:51:86:1d:93:93:bb:df:
6e:4c:bc:75:a2:fe:cb:0b:b8:19:bc:23:d5:26:08:
ba:2b:8a:50:4d:4a:5e:31:53:0e:cd:86:3e:ad:c4:
7f:e7:d9:4f:b2:71:43:ee:b5:95:09:db:24:36:a7:
17:f0:78:fe:29:21:c4:76:7b:00:49:06:f5:3e:9e:
3c:78:03:dd:bd:fd:fd:79:64:6d:c4:ba:09:44:3e:
ac:85:68:10:18:95:9f:20:bf:4f:dd:15:06:89:2e:
cd:51:36:7b:2c:9b:d4:26:51:e9:da:e3:d8:f5:15:
b1:ce:1a:49:92:a2:01:4b:d1:41:2b:49:5b:04:ba:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1A:AD:10:5E:40:E3:93:4F:E1:2F:8D:89:CE:96:5E:8D:DE:D6:2A
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/9hqtEF5A45NP4S-Nic6WXo3e1io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.47.0/24
Signature Algorithm: sha256WithRSAEncryption
53:37:48:fb:61:4a:7e:1a:43:bc:6a:01:c8:b9:e4:34:d6:a4:
89:b7:4e:a2:09:19:ba:a4:43:b1:d9:65:74:76:9b:b8:e0:de:
ac:3e:20:fd:7f:d6:31:86:04:ff:f1:2d:75:d3:ab:d1:49:f9:
1d:7b:79:9a:67:d0:b2:f7:f0:67:a4:47:5e:43:b0:ae:21:fb:
f2:09:71:bc:ef:83:f4:e8:73:f4:0e:d6:f4:61:c9:08:37:2d:
9b:3e:dd:1a:2a:c1:92:99:71:71:04:00:c6:e6:72:3f:d6:da:
77:d2:e8:c7:cb:f3:26:cf:45:2a:93:9a:d3:26:e2:22:a5:8c:
06:58:68:7e:d5:47:a4:4e:be:41:e9:27:c8:39:62:c0:4c:eb:
cc:3b:53:db:e5:e4:2c:cf:4d:09:5d:a3:ea:12:5e:4c:f0:ea:
58:f9:33:d7:39:3f:ff:74:f0:a0:ee:53:1e:bc:77:03:da:23:
3e:00:15:98:85:a0:04:b9:7b:30:b8:6e:af:95:95:ba:de:4b:
ee:f4:14:e0:da:b2:69:2b:d7:91:75:0a:37:ff:f8:4f:96:46:
e3:02:47:bc:7e:0f:2b:f9:db:d4:e8:28:c6:c1:41:50:fe:d4:
3a:52:e5:ae:2c:44:02:5a:2b:c6:76:28:1b:e1:56:fd:a0:3f:
d3:5e:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:19 2024 by rpki-client on console-fra.rpki-client.org